Call: +44 (0)1904 557620 Call

Pete Finnigan's Oracle Security Weblog

This is the weblog for Pete Finnigan. Pete works in the area of Oracle security and he specialises in auditing Oracle databases for security issues. This weblog is aimed squarely at those interested in the security of their Oracle databases.

[Previous entry: "Colin Maxwell talks about securing web services using JDev and WS-Security"] [Next entry: "Hack notes books"]

Oracle VP database and server technology in Germany talks about Oracle patch schedules

I just heard from my good friend Alex Kornbrust who has just returned from from 3 days of attending the German Oracle users conference (DOAG 2004) which had more than 1400 attendees.

Alex told me that there was a question and answer session (10 Nov 2004 for 90 Minutes) with the top management of Oracle Germany.

One question from the Oracle client's was:
What is Oracle's strategy with security patches?

The answer from Günther Stürner, VP database & server technology of Oracle Germany:

"The patchdays will come definitively. The open questions for Oracle itself are still:
When will Oracle start the patchdays and with what rate (biweekly, monthly,
quarterly or any other period of time)"

It still seems that after almost 3 months of a promised monthly patch schedule that Oracle chiefs are still not sure about what the actual schedule will be but Günther Stürner does seem sure that there actually will be a schedule.